Intermediate ICAM System Administrator

Grant Leading Technology is seeking a hands-on Linux and Windows Systems Administrator to join our dynamic team. This role will encompass the infrastructure and day-to-day operation of cybersecurity technologies and maintain reliable and secure systems, troubleshoot infrastructure and application issues, develop scripts and automation, manage logs, monitor system resources and some support off-hours. This position is remote, with standard hours of 8 a.m. to 5 p.m. Eastern Time, subject to client confirmation.

Off hours support to include rotating “on call” hours, one week per month.

Grant Leading Technology is seeking a hands-on Linux and Windows Systems Administrator to join our dynamic team. This role will encompass the infrastructure and day-to-day operation of cybersecurity technologies and maintain reliable and secure systems, troubleshoot infrastructure and application issues, develop scripts and automation, manage logs, monitor system resources and some support off-hours. This position is remote, with standard hours of 8 a.m. to 5 p.m. Eastern Time, subject to client confirmation.

Off hours support to include rotating “on call” hours, one week per month.

• Administer Linux and Windows Server environments, including installation, configuration, patching, upgrades, services, permissions, storage, and performance tuning. Maintain supported operating system versions and approved configurations.
• Support servers, services, agents, and integrations used by Cyber Ark, Ping, and Nok Nok. Coordinate platform changes with product owners and security engineers; validate functionality following maintenance and upgrades.
• Troubleshoot Linux and Windows authentication, network connectivity issues like SSH and RDP connectivity, service accounts, certificates, DNS, network connectivity, and application dependencies. Investigate Cyber Ark privileged-session issues, including PSMP and SSH, where deployed.
• Manage and maintain Microsoft Entra infrastructure including Microsoft Intune, Purview, and Defender
• Develop and maintain Power Shell and Bash scripts for health checks, service monitoring, inventory, reporting, log collection, and routine administration. Use Python and APIs when appropriate. Document, test, version-control, and securely manage automation credentials.
• Automate log collection, parsing, rotation, archival, retention, and disk-space cleanup in accordance with approved policies. Validate forwarding to designated centralized logging or SIEM tools and protect sensitive information in logs.
• Monitor for server availability, CPU, memory, disk capacity, processes, services, and application health using available modules. Tune thresholds, dashboards, notifications, and escalation procedures to reduce missed issues and unnecessary alerts.
• Apply approved hardening baselines and remediate vulnerabilities. Maintain least-privilege access, service account permissions, certificates, and SSH keys in coordination with security and identity teams.
• Monitor, triage, and resolve incoming incident and service request tickets in accordance with program SLAs. Document resolutions, track recurring issues, and ensure proper escalation when needed.
• Perform routine application onboarding tasks for Single Sign-On (SSO) and identity tools (e.g., Ping, Cyber Ark), including integration validation, target configuration, and provisioning support during steady-state cycles.
• Perform and validate backups, configuration recovery, and restoration procedures. Participate in disaster recovery testing and document dependencies, recovery steps, and results.
• Respond to incidents and service requests, perform root cause analysis, and coordinate with vendors and…